diff --git a/backend/src/oauth/provider/genericOidc.provider.ts b/backend/src/oauth/provider/genericOidc.provider.ts index 8c94571..2c99ab3 100644 --- a/backend/src/oauth/provider/genericOidc.provider.ts +++ b/backend/src/oauth/provider/genericOidc.provider.ts @@ -149,7 +149,10 @@ export abstract class GenericOidcProvider implements OAuthProvider { // A path to read roles from the token is configured let roles: string[] = []; try { - roles = jmespath.search(idTokenData, roleConfig.path); + const rolesClaim = jmespath.search(idTokenData, roleConfig.path); + if (Array.isArray(rolesClaim)) { + roles = rolesClaim; + } } catch (e) { this.logger.warn( `Roles not found at path ${roleConfig.path} in ID Token ${JSON.stringify(